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SYSTEM AND METHODS FOR PROVING DATES IN DIGITAL-IMAGING FILES 

Copyright Notice 

Portions of the disclosure of this patent document may contain material that is subject to 
copyright protection. The copyright owner has no objection to the facsimile reproduction by 
5 anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark 
Office patent file or records, but otherwise reserves all copyright rights whatsoever. 

Cross-Reference to Related Applications 
This application is related to the following co-pending, commonly assigned applications, 
each of which is incorporated herein by reference: (1) U.S. Serial No. 60/142,132, which was filed 
10 July 2, 1999, and entitled "System and Method of Proving Dates and Times of Digital Data Files"; 
(2) U.S. Serial No. 09/421,279, which was filed October 20, 1999, and entitled "Smart Card System 
and Methods for Proving Dates in Digital Data Files"; (3) U.S. Serial No. 09/429,360, which was 
filed October 28, 1999, and entitled "Personal Computer System and Methods for Proving Dates in 

Q Digital Data Files"; and (4) U.S. Serial No. , which was filed concurrently 

■Jf5 herewith, and entitled "System and Methods for Proving Dates in Digital Data Files" (Attorney 
Q Docket No. 32801-888888). 

oft Background of the Invention 

jfj; Field of the Invention 

=\, The present invention relates generally to digital data files, and more particularly to systems 

3o and methods for proving dates in such digital data files. 
!=! Statement of the Prior Art 
•O Scope of the Problem 

Digital data files come in many formats. None of those formats currently provide means for 
proving — with certainty — dates and times associated with access, creation, modification, receipt, 
25 saving, or transmission of such digital data files. This is not only due to the variety of application 
programs which are available for digital data file access, creation, modification, receipt, saving, and 
transmission, but also due to the much more varied "standards" and protocols put forth in the vain 
attempt to provide uniformity worldwide. 

Illustrative of the enormity of the problem are the following operating environments, within 
30 which the system and methods according to the present invention can provide the much-needed but 
often ignored time certainty. 

Digital Document Processing 

"Processing" may be viewed as the manipulation of data within a computer system. Since 
virtually all computer systems today process digital data, processing is the vital step between 
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receiving the data in binary format (i.e., input), and producing results (i.e., output) — the task for 
which computers are designed. 

The Microsoft® Press Computer Dictionary, 3d Edition (1997) defines the term document 
as ". . . any self-contained piece of work created with an application program and, if saved on disk, 
5 given a unique filename by which it can be retrieved." Most people think of documents as material 
done by word processors alone. To the typical computer, however, data is little more than a 
collection of characters. Therefore, a database, a graphic, or a spreadsheet can all be considered as 
much a document as a letter or a report. In the Macintosh environment in particular, a document is 
any user-created work named and saved as a separate file. 
10 Accordingly, for the purpose of the invention described herein, digital document processing 

shall be interpreted to mean the manipulation of digital (i.e., binary) data within a computer system 
to create or modify any self-contained piece of work with an application program and, if saved on a 
disk or any other memory means, given a unique filename by which it can be retrieved. Examples 
Q of such application programs with which the present invention may be used to assist in such digital 
i!5 document processing are Microsoft® Access 97, Microsoft® Excel 97, and Microsoft® Word 97, 
y each of which is available from Microsoft Corporation, Redmond, Washington U.S.A. 
!H Digital Communications 

ffl "Communications" may be broadly defined as the vast discipline encompassing the 

^ methods, mechanisms, and media involved in information transfer. In computer-related areas, 
50 communications usually involve data transfer from one computer to another through a 
57= communications medium, such as a telephone, microwave relay, satellite link, or physical cable. 
O Two primary methods of digital communications among computers presently exist. One 

method temporarily connects two computers through a switched network, such as the public 
telephone system. The other method permanently or semi-permanently links multiple workstations 
25 or computers in a network. In reality, neither method is distinguishable from the other, because a 
computer can be equipped with a modem, which is often used to access both privately owned and 
public access network computers. 

More particular forms of digital communications (i.e., exchange of communications in 
which all of the information is transmitted in binary-encoded, digital format) include electronic 
30 mail (or less formally "e-mail"), facsimile, voicemail, and multimedia communications. 

E-mail may be broadly defined as the exchange of text messages/computer files over a 
communications network, such as a local area network (LAN) or the Internet, usually between 
computers or terminals. Facsimile (or, again, less formally "fax") comprises the transmission and 
reception of text or graphics over telephone lines in digitized form. Conventional fax machines 



-2- 



32801-999999 

scan an original document, transmit an image of the document as a bit map, and reproduce the 
received image on a printer. Resolution and encoding of such fax messages are standardized in the 
CCITT Groups 1-4 recommendations. Fax images can likewise be sent and received by computers 
equipped with fax hardware and software. 
5 The CCITT Groups 1-4 recommendations make up a set of standards recommended by the 

Comite Consultatif International Telegraphique et Telephonique (now known as the International 
Telecommunication Union) for encoding and transmitting images over fax machines. Groups 1 and 
2 relate to analog devices, which are generally out of use. Groups 3 and 4 deal with digital devices, 
and are outlined below. 

10 Group 3 is a widespread standard that supports "standard" images of 203 horizontal dots per 

inch (dpi) by 98 vertical dpi, and "fine" images of 203 horizontal dpi by 198 vertical dpi. Group 3 
devices support two methods of data compression. One is based on the Huffman code, and reduces 
an image to 10 to 20 percent (10% - 20%) of the original. The other, known as "READ" (for 
D "relative element address designate"), compresses an image to about six to twelve percent (~ 6% - 
M s 5 12%) of its original. Additionally, the READ method provides for password protection as well as 
■% polling, so that a receiving machine can request transmission as appropriate. 
W Group 4 is a newer standard, which supports images of up to 400 dpi. Its method of data 

m compression is based on a beginning row of white pixels, or "dots", with each succeeding line 
% encoded as a series of changes from the line before. Images are compressed to about three to ten 
~%0 percent (~ 3% - 10%) of the original. Group 4 devices do not include error-correction information 
j?j in their transmission. Moreover, they require an Integrated Services Digital Network (ISDN) phone 
y line rather than a traditional dial-up line. 

Fax modems may also be used to send and receive digital data encoded in known fax 
formats {e.g., one of the CCITT groups noted above). Such data is either sent or received by a fax 
25 machine or another modem, which then decodes the data and converts it to an image. If the data 
was initially sent by fax modem, the image must previously have been encoded on the computer 
hosting such fax modem. Text and graphic documents can be converted into fax format by special 
software that is usually provided with the fax modem. Paper documents must first be scanned in. 
As is well known, fax modems may be internal or external and may combine fax and conventional 
30 modem capabilities. 

Voicemail generally comprises a system that records and stores telephone messages in a 
computer's memory. Unlike a simple answering machine, voicemail systems include separate 
mailboxes for multiple users, each of whom can copy, store, or redistribute messages. Another type 
of digital communications involving voice is "voice messaging", a term which generally refers to a 
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system that sends and receives messages in the form of sound recordings. Typical voice messaging 
systems may employ "voice modems", which are modulation/demodulation devices that support a 
switch to facilitate changes between telephony and data transmission modes. Such a device might 
contain a built-in loudspeaker and microphone for voice communication, but more often it uses the 
5 computer's sound card. 

Still another form of digital communications includes multimedia communications in the 
style of "video teleconferencing", as defined by the International Telecommunication Union 
(formerly CCITT) in "Visual Telephone Systems and Equipment for Local Area Networks Which 
Provide a Non-Guaranteed Quality of Service," (Recommendation H.323, Telecommunication 
10 Standardization Sector of ITU, Geneva, Switzerland, May 1 996) and other similar such standards. 
Digital-imaging 

"Digital-imaging" encompasses those known processes involved in the capture, storage, 
display, and printing of graphical images. They may involve devices known as a "digital camera", 
Q which broadly refers to a camera that stores photographed images electronically instead of on 
of 5 traditional film. Digital cameras typically use charge-coupled device (CCD) elements to capture 
% the image through the lens when the operator releases the shutter in the camera. Circuits within the 
ill camera cause the image captured by the CCD to be stored in a storage medium, such as solid-state 
III memory or a hard disk. After the image has been captured, it is downloaded by cable to the 

computer using software supplied with the camera. Once stored in the computer, the image can be 
30 manipulated and processed much like the image from a scanner or related input devices. Digital 
|7d cameras come in the form of still cameras and full-motion video recorders. 

y Other forms of digital-imaging include digitizing systems, such as the "PhotoCD®" system 

from Eastman Kodak Company, Rochester, New York. That system allows 35mm film pictures, 
negatives, slides, and scanned images to be stored on a compact disc. Images are then stored in a 

25 file format known as the Kodak PhotoCD Image Pac File Format, or PCD. Many photography and 
film development businesses offer this service. Any computer with CD-ROM capabilities can 
usually view images stored on a PhotoCD and the software required to read PCD. Additionally, 
such images can be viewed by any one of a variety of players that are specifically designed to 
display images stored on CDs. Another photographic form of digital-imaging is defined by the 

30 "Flashpix" specification, the cooperative endeavor of the Digital-imaging Group, Microsoft, the 
Hewlett-Packard Company, and Live Picture, Inc. The Flashpix format builds on the best features 
of existing formats (e.g., Kodak Image Pac, Live Picture IVUE, Hewlett-Packard JPEG, TIFF, 
TIFF/EP, etc.), and combines these features with an object orientated approach. 
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Still other forms of digital-imaging include digital radiography, radiotherapy, x-ray, 
positron emission tomography, ultrasound, and magnetic resonance imaging according to the joint 
work of the American College of Radiology (ACR) and the National Electrical Manufacturers 
Association (NEMA), published in the Digital-imaging and Communications in Medicine PS 3- 
1998 (DICOM Standard). 

Digital Commerce 

An enormous amount of commercial activity now takes place by means of connected 
computers. Such commercial activity has been variously coined as digital commerce, electronic 
commerce, or just plain E-commerce. Regardless of its particular moniker, these activities 
genetically involve a commercial transaction between a user and a vendor through an online 
information service, the Internet, or a BBS, or between vendor and customer computers through a 
specialized form of E-commerce known as electronic data interchange (EDI). 

EDI is collectively known for its set of standards to control the transfer of business 
documents (e.g., purchase orders and invoices) between computers. The ultimate goal of EDI is the 
elimination of paperwork and increased response time. For EDI to be most effective, users must 
agree on certain standards for formatting and exchanging information, such as the X.400 protocol 
and CCITT X series. 

Other known forms of E-commerce include digital banking, web-front stores, and online 
trading of bonds, equities, and other securities. Digital banking can take the form of access to a 
user's account, payment of bills electronically, or transfer of funds between a user's accounts. 
Web-front stores (e.g., amazon.com) usually comprise a collection of web pages in the form of an 
electronic catalog, which offers any number of products for sale. More often than not, transactions 
at such web-front stores are consummated when a purchaser enters his credit card number, and the 
issuing bank approves the purchase. These transactions may or may not be over secure lines, such 
as those designated "TRUSTe" participant web sites. Further details regarding known processes 
for establishing and maintaining secure E-commerce connections may be found in the SET Secure 
Electronic Transaction Specification, Book 1 : Business Description (Version 1.0), May 31, 1997, 
the contents of which are incorporated herein by reference. See also Book 2 (Programmer's Guide) 
and Book 3 (Formal Protocol Definition) of the SET Secure Electronic Transaction Specification , 
as well as the External Interface Guide to SET Secure Electronic Transaction , September 24, 1997, 
each of which is incorporated herein by reference. 

One burgeoning form of E-commerce that has arisen in the past few years is that which 
involves dealing in securities online. "Day traders" watch impatiently as ticker symbols speed 
across their computer screens. When the price is right, they electronically whisk their order off to a 
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distant securities dealer — often buying and selling the same stock or bond in a fifteen-minute span 
of time. One can only imagine the potential problems associated with the purchase or sale of 
securities when price-per-share movements on the order of a few cents make the difference to these 
day traders. Fortunately, the National Association of Securities Dealers (NASD) has come up with 
5 its Order Audit Trail Systems (OATS SM ) to track all stock transactions. NASD Rule 6953 also 

requires all member firms that have an obligation to record order, transaction, or related data under 
the NASD Rules or Bylaws to synchronize the business clocks that are used for recording the date 
and time of any market event. Computer system and mechanical clocks must be synchronized 
every business day before market open, at a minimum, in order to ensure that recorded order event 
10 timestamps are accurate. 

Digital Justice 

Even legal scholars and systems around the world have been unable to escape the problems 
of an online world. Utah became the first jurisdiction in the United States of America to enact 
□ legislation creating "cybernotaries". Similar laws in Georgia, Florida, and Massachusetts quickly 
j|5 followed Utah. 

In August 1996, the American Bar Association (through its Information Security Committee 
m of the Electronic Commerce and Information Technology Division, Section of Science and 
J Technology) published the Digital Signature Guidelines — Legal Infrastructure for Certification 
JL Authorities and Secure Electronic Commerce . The European Union, as well, in a final report on the 

Legal Issues Of Evidence And Liability In The Provision Of Trusted Services (CA and TTP 
JTS Services) , let its position be known in October 1 998. 

2 Each of the environments noted above is fraught with potential fraud. Any reliance they 

may have on dates and times is merely for the purpose of determining whether the transaction is 
valid (i.e., authorized within a specified range of time), or what specific time delays occur in the 

25 transmission of data between the computer systems communicating with one another. However, 
none of those environments currently provide means for proving — with certainty — dates and 
times associated with access, creation, modification, receipt, or transmission of digital data files, 
which may be used therein. 

Prior Art Attempts to Solve the Problem 

30 Many-varied computing means pervade today's society. PCs, web browsers, e-mail clients, 

e-mail servers, network file servers, network messaging servers, mainframes, Internet appliances, 
wireless telephones, pagers, PDAs, fax machines, fax modems, digital still cameras, video cameras, 
voice recorders, video recorders, copiers, and scanners, and virtually any other device using digital 
data files are fast becoming ubiquitous. 
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Digital data is easy to modify. As a result, it has been nearly impossible in the prior art to 
establish with certainty the date and time a particular digital data file in a given computing means 
was accessed, created, modified, received, saved, or transmitted. It should be understood that, by 
use of the term "computing means", the present invention is directed to general purpose computers, 
PCs, web browsers, e-mail clients/servers, network file/messaging servers, mainframes, Internet 
appliances, wireless telephones, pagers, PDAs, fax machines, digital still/video cameras, digital 
voice/video recorders, digital copiers/scanners, interactive television, hybrid combinations of any of 
the above-noted computing means and an interactive television (e.g., set-top boxes), and any other 
apparatus, which generally comprises a processor, memory, the capability to receive input, and the 
capability to generate output. 

Such computing means typically include a real time clock ("RTC") for keeping track of the 
time and date. Likewise, operating systems and/or applications programs used in such computing 
means usually stamp the time and date (as derived from the RTC) that each of the digital data files 
is accessed, created, modified, received, saved, or transmitted. Such stamping of digital data files 
with times and dates (collectively referred to as "time-stamping") has, thus, become an integral part 
of all of the above known computing environments. 

Although the existing framework of time-stamping can be used to catalogue and sort one's 
own files, for other critical needs it suffers from two fatal flaws. Files are typically "time-stamped" 
with a value read from the RTC. There is no simple way of determining whether the RTC is set to 
the correct date and time. Indeed, it is quite trivial for a user to reset the RTC to any desirable date 
and time. Even if the computing means' RTC had been correctly set, nothing would prevent a user 
from arbitrarily changing the "time-stamps" themselves. This is readily accomplished through the 
direct manipulation of the digital data where the time-stamp is stored. 

Thus, the known time-stamping framework is useless for any situation where the accuracy 
of the date or time of a digital data file is critical. Court filings, medical records, files presented as 
incriminating or exculpatory evidence in court cases, legal documents such as wills, billing records, 
patent, trademark, and copyright claims, and insurance documents are only a few of the areas where 
the date and time that is associated with the file is critical. Conventional systems and methods that 
time-stamp digital data files fail to meet this need. Furthermore, there is no "open", cross-platform, 
interoperable global standard in place to create trusted time-stamps. 
Cryptographic Systems and Keys 

One approach that has been used in the past to provide some level of security in digital data 
files is the use of cryptographic systems and keys. In general, cryptographic systems are used to 
encrypt or "lock" a digital data file. A key is used, conversely, to decrypt or "unlock" an encrypted 
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digital data file. Digital data files are merely bits of data in memory or on a network. If this data is 
viewed as the mere representation of large numbers, then mathematical functions or algorithms can 
be easily applied to the data. 

For example, where a particular digital data file is a text file, its unencrypted or "cleartext" 
5 version can be viewed as the variable x. The resulting function of this variable x, when encrypted 
by its associated cryptographic algorithm and coupled with its key k will be f (k, x). Accordingly, 
the encrypted text or "cyphertext" can be defined by the equation: 

y = f(k,x). 

By choosing the cryptographic algorithm carefully - such that there is no easily discovered inverse 
10 mapping (i.e., for any given y, it will be extremely difficult to calculate x without knowing k, while 
at the same time, with knowledge of k it will be possible) - the data may be encrypted. 
Symmetric Cryptography 

If the key for encryption and decryption is the same shared secret, then the cryptographic 
^ system and associated algorithm will be referred to as "symmetric". Both the sender and the 
; 3:5 receiver must share the key in such symmetric cryptographic systems. A sender first applies the 
i§ encryption function using the key to the cleartext to produce the cyphertext, which is then sent to a 

receiver. The receiver applies the decryption function using the same shared key. Since the 
y 1 cleartext cannot be derived from the cyphertext without knowledge of the key, the cyphertext can 
Q be sent over public networks such as the Internet. 

;2j0 The current United States standard for symmetric cryptography, in which the same key is 

W used for both encryption and decryption, is the Data Encryption Standard (DES), which is based 
A upon a combination and permutation of shifts and exclusive ors. This approach can be very fast, 

whether implemented directly on hardware (e.g., 1 GByte/sec throughput or better) or in general 

purpose processors. The current key size of 56 bits (plus 8 parity bits) is sufficient, yet somewhat 
25 small, but the growing use of larger keys with "triple DES" generate much greater security. Since 

the implementation of DES is fast, it can easily be pipelined with software codecs and not impact 

system performance. 

An alternative and yet stronger form of symmetric block encryption is IDEA. Its security is 
based upon combining exclusive ors with addition and multiplication in modulo-16 arithmetic. The 
30 IDEA approach is also fast on general purpose processors. It is comparable in speed to known DES 
implementations. One major advantage of IDEA is its keys, which are 128 bits and are, thus, much 
stronger (i.e., harder to break) than standard 56-bit DES keys. 
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One particular problem with the use of such symmetric systems is the problem of getting the 
sender and the receiver to agree on the key without anyone else finding out. Moreover, the problem 
becomes greatly complicated when additional users {i.e., potential senders and receivers) are added 
to the system. Such symmetric cryptographic systems, nevertheless, are by far easier to implement 
5 and deploy than their asymmetric counterparts since they require far less infrastructure. Sometimes 
with a symmetric cryptographic system, however, keys are submitted over the network. Avoidance 
of this security risk would be desirable. 
Asymmetric Cryptography 

Systems that generate and employ a secure key pair {i.e., a "private key" for creating the 
10 "digital signature" and a "public key" to verify that digital signature) are typically known as 

asymmetric cryptographic systems. There are many known cryptographic algorithms {e.g., RSA, 
DSA, and Diffie Hellman) that involve a key pair. In such asymmetric cryptographic systems, the 
private key and the public key are mathematically linked. The private key can only decrypt 
anything that is encrypted by the public key. Conversely, the public key can only verify anything 
'uU 5 that is signed by the private key. Asymmetric cryptographic systems are, thus, inherently more 
■ s q secure than symmetric or shared secret systems. The sensitive private key need exist in only one 
•1: place. No form of the private key is ever transmitted over the network. Typical asymmetric 
111 cryptographic systems also scale to many users more easily than shared secret systems. However, 
i=i the infrastructure that is necessary to field systems of this type, commonly called a "Public Key 
J20 Infrastructure" (PKI), is non-trivial to implement. See, e.g., RFC 1422, Privacy Enhancement for 
y Internet Electronic Mail: Part II: Certificate-Based Key Management (Feb. 1996), the contents of 
JSJ which are incorporated herein by reference. 
Digital Signatures 

Referring now to Figs. 1 and 2, wherein like reference characters or numbers represent like 
25 or corresponding parts throughout each of the several views, an exemplary process 100 for creating 
a digital signature is shown in Fig. 1. To sign a document, or for that matter any other digital data 
file, a "signer" must first delimit the borders of the digital data file to be signed. As used herein, 
the term signer refers to any person who creates a digital signature for a message, such as message 
1 10. The information delimited by the signer, in turn, refers to that message 110. A hash function 
30 1 20 in the signer's software is used to compute a hash result 130, which is unique for all practical 
purposes to the message 110. Thereafter, a signing function 140 is used to transform the hash result 
130 into a digital signature 160, but only after input of the signer's private key 150. 

This transformation is sometimes referred to as a process of encryption. However, such a 
characterization would be inaccurate, because message 110 itself may, or may not be confidential. 
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Confidentiality may be provided as an optional feature in most digital signature technologies, but 
the separate and distinct security service of confidentiality is not central to the security services of 
signer authentication, document authentication, or digital data file authentication. In any case, the 
resulting digital signature 160 is unique to both the message 1 10 and the private key 150, which is 
5 used to create the digital signature 160. 

Typically, most digital signatures 160 (i.e., the digitally-signed hash result of message 1 10) 
are used in one of two ways. They may be attached to their associated message 1 10 and, thereafter, 
simply stored. In the alternative, they may be copied 170 and coupled with digital signature 160, in 
the form of a single data element 180 and, thereafter, transmitted 190 to a verifier. 
1 0 This single data element 1 80 is, in some cases as will be described in greater detail herein 

below, referred to as a "digital certificate". Furthermore, the digital signature 160 may be simply 
transmitted or stored as a separate data element, so long as it maintains a reliable association with 
its message 110. Each digital signature 160 is unique to the specific message 1 10, which has been 
^ used to create it. Otherwise, it would be counterproductive if the digital signature 160 was wholly 
H5 disassociated from that message 110. 

An exemplary verification process 200 for verifying digital signature 160 is shown in Fig. 2. 
^ Element 180, comprising digital signature 160 attached to message 1 10, is first received 190 from 
Iff the signer. A new hash result 220 of the original message 1 10 is then computed by the verifier by 
q means of the same hash function 120 used to create the digital signature 160. 
10 It should be noted at this juncture that use of the term "to verify" herein, with respect to any 

id given digital signature, message, and public key, refers to those processes of accurately determining 
•ff that: (1) the digital signature 160 was created during the "operational period" of a valid certificate 
180 by the private key 150 corresponding to the public key 260 listed in the certificate 180; and (2) 
the message 110 had not been altered since its digital signature 160 was created. 
25 It should also be noted at this juncture that use of the term "operational period" herein refers 

to a period that begins on a date and time a certificate 180 is issued by a "certification authority", or 
on a later date and time certain if stated in the certificate 1 80, and ends on a date and time it expires 
or is earlier revoked or suspended. 

Then, by use of the public key 260 and such new hash result 220, the verifier can check: (1) 
30 whether the digital signature 160 was created using the signer's private key 150; and (2) whether 
the newly computed hash result 220 matches the original hash result 130, which was transformed 
into the digital signature 160 during the signing process. 

Most known verification software will confirm the digital signature 160 as "verified" if two 
conditions are satisfied. One condition will be satisfied if the signer's private key 150 was used to 
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digitally sign the message 110. This condition will be met if the signer's public key 260 was used 
to verify the digital signature 160, because the signer's public key 260 is capable of verifying only 
a digital signature 160 that is created with the signer's private key 150. The other condition will be 
satisfied if message 1 10 was received unaltered. This condition will be met if the hash result 220 
5 that is computed by the verifier turns out to be identical to the hash result 130 that is extracted from 
digital signature 160 during the verification process. A verifier function 240 is used to make these 
comparisons, while further processing of the message 1 10 is dependent upon whether message 110 
is determined to be valid at step 280. 
Digital Certificates 

10 The term "digital certificate" as used herein generally refers to any message, which at least 

(1) identifies the certification authority (CA) issuing it; (2) names or identifies its "subscriber"; (3) 
contains the subscriber's public key; (4) identifies its operational period; and (5) is digitally signed 
by the CA issuing it. Metaphorically, digital certificates serve as electronic substitutes for a sealed 
O envelope or a signer's signature. In one case, for example, VeriSign Digital ID™ (a trademark of 
ijb5 VeriSign, Inc., Mountain View, California) securely resides in a signer's Internet browser or e-mail 
;|j software, and enables that signer to digitally sign and encrypt e-mail. Digital certificates can also 
Cm be viewed as electronic equivalents of a driver's license or a passport. Containing information that 
ih uniquely identifies the signer, the digital certificate allows the signer to: (1) digitally sign a message 
iU, so the recipient knows that a message actually originated from the signer; and (2) encrypt a 
~*M) message so the intended recipient can decrypt and read its contents and attachments. Most digital 
jTj certificates are easy to use, with point-and-click interfaces in all of the popular browsers and e-mail 
packages. A person seeking to verify a digital signature needs, at a minimum, (1) the public key 
corresponding to the private key used to create the digital signature, and (2) reliable evidence that 
the public key (and thus the corresponding private key of the key pair) is identified with the signer. 
25 The basic purpose of the digital certificate is to serve both these needs in a reliable manner. 
Dual Signatures 

As noted herein above, digital signatures and digital certificates have both been used in the 
past to provide some level of certainty as to the identity of a particular person accessing, creating, 
modifying, receiving, saving, or transmitting a digital data file. E-commerce presents other 
30 challenges for securing digital data files. In particular, the process of providing secure electronic 
transactions has raised the concerns for maintaining a person's privacy. An approach that has been 
used in the past to provide such security is known as "dual signatures", and is illustrated below. 

User B wants to send User A an offer to purchase a piece of property that User A owns and 
an authorization to his bank to transfer the money if User A accepts the offer. Nevertheless, User B 



-11- 



32801-999999 

does not want the bank to see the terms of his outstanding offer to User A, nor does he want User A 
to see his bank account information. User B also wants to link his offer to the transfer such that the 
money will only be transferred if User A accepts his offer. According to the SET Secure Electronic 
Transaction Specification , User B accomplishes all of this by digitally signing both messages with a 
5 single signature operation that creates a dual signature. 

Such a dual signature is generated in four steps. First, a message digest is created for both 
messages sent by User B (i.e., one to User A, and one to the bank). The resulting pair of message 
digests is then concatenated together. Next, a message digest of the concatenated result is created. 
This third message digest is finally encrypted with the User B's private signature key. User B must 
1 0 include the message digest of the other message in order for a recipient to verify his dual signature. 
The recipient of either message can then check its authenticity by generating the message digest on 
its copy of the message, concatenating it with the message digest of the other message (as provided 
by the User B), and thereafter computing the message digest of the result. If the newly generated 
? =j; digest matches the decrypted dual signature, the recipient can trust the authenticity of the message. 
1115 In the event that User A accepts User B's offer, she sends a message to the bank indicating 

jlj her acceptance and including the message digest of the offer. The bank can verify the authenticity 
^ of User B's transfer authorization, and ensure that the acceptance is for the same offer by using its 
Iff digest of the authorization and the message digest presented by User A of the offer to validate the 
]=l dual signature. On the one hand, the bank can therefore check the authenticity of the offer against 
10 the dual signature. It cannot, on the other hand, see the terms of the offer. 

|.sj Further details regarding such known processes may be found in the SET Secure Electronic 

Transaction Specification, Book 1 : Business Description (Version 1.0), May 31, 1997, the contents 
of which are incorporated herein by reference. See also Book 2 (Programmer's Guide) and Book 3 
(Formal Protocol Definition) of the SET Secure Electronic Transaction Specification , as well as the 

25 External Interface Guide to SET Secure Electronic Transaction , September 24, 1997, each of which 
is incorporated herein by reference. 

As is best illustrated by reference to Fig. 3, the process of creating such dual signatures will 
now be described in greater detail. User A runs the property description 305 through a one-way 
algorithm 310 to produce a unique value known as the message digest 315. This is a kind of digital 

30 fingerprint of the property description 305, and will be used later to test the integrity of the 

message. She then encrypts the message digest 315 with her private signature key 320 to produce 
her digital signature 325. Next, she generates a random symmetric key 330 and uses it to encrypt 
the combination of the property description 305, her signature 325 and a copy of her certificate 335 
containing her public signature key 340 (collectively referred to as the message 345). 
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To decrypt the property description 305, user B will require a secure copy of this random 
symmetric key 330. User B's certificate 350, which user A must have obtained prior to initiating 
secure communication with him, contains a copy of his public key-exchange key 355. To ensure 
secure transmission of the symmetric key 330, user A encrypts it first using user B's public key- 
exchange key 350. The encrypted key, referred to as the digital envelope 360, will then be sent to 
user B along with the encrypted message 345 itself. 

Likewise, the decryption process consists of the following steps. User B receives the 
message 345 from user A and decrypts the digital envelope 360 with his private key-exchange key 
365 to retrieve the symmetric key 330. He uses the symmetric key 330 to decrypt the property 
description 305, user A's signature 325, and her certificate 335. He decrypts user A's digital 
signature 325 with her public signature key 340, which he acquires from her certificate 335. This 
recovers the original message digest 315 of the property description 305. He runs the property 
description 305 through the same one-way algorithm 310 used by user A and produces a new 
message digest 370 of the decrypted property description 305. Finally, he compares his message 
digest 370 to the one 315 obtained by use of user A's public signature key 340 contained within her 
digital signature 325. If both digests 315, 370 are exactly the same, user B then confirms that the 
message content has not been altered during transmission and that it was signed using user A's 
private signature key 320. On the other hand, if digests 315, 370 are not the same, then message 
305 either originated somewhere else or was altered after it was signed. User B could then elect to 
take some appropriate action, such as notifying user A or discarding the message 305. 

Digital Time-Stamps 

A digital time-stamping service (DTS) issues time-stamps, which associate a date and time 
with a digital document in a cryptographically strong way. The digital time-stamp can be used at a 
later date to prove that an electronic document existed at the time stated on its time-stamp. For 
example, a physicist who has a brilliant idea can write about it with a word processor and have the 
document time-stamped. The time-stamp and document together can later prove that the scientist 
deserves the Nobel Prize, even though an arch rival may have been the first to publish. 

The manner in which such conventional time-stamping systems work is illustrated in Fig. 4. 
Hypothetically, a user at a computing means 400 signs a document and wants it time-stamped. The 
user first computes a message digest 420 of the document using a secure hash function, and second 
sends the message digest 420 (but not the document itself) to the DTS 440. The DTS 440 sends the 
user in return a digital time-stamp 460 consisting of the message digest, the date and time it was 
received at the DTS 440, and the signature 480 of the DTS 440. Since the message digest 420 does 
not reveal any information about the content of the document, the DTS 440 cannot eavesdrop on 
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the documents it time-stamps. Thereafter, the user can ostensibly present the document and time- 
stamp 460 together to prove when the document was written. A verifier then computes the message 
digest 420 of the document, makes sure it matches the digest in the time-stamp 460, and verifies the 
signature 480 of the DTS 440 on the time-stamp 460. 
5 To be reliable, the time-stamps must not be forgeable. The DTS 440 itself must have a long 

key if the time-stamps are to be reliable for long periods of time (e.g., several decades). Moreover, 
the private key of the DTS 440 must be stored with utmost security, as in a tamperproof box. The 
date and time must come from a clock, also inside the tamperproof box, which cannot be reset and 
which will keep accurate time for years or perhaps for decades. It must also be infeasible to create 
1 0 time-stamps without using the apparatus in the tamperproof box. 

All of the above requirements greatly complicate the process of obtaining legally sufficient 
proof of the date and time a digital data file was accessed, created, modified, received, saved, or 
transmitted. In fact, time-stamping a document in the manner described above only certifies the 
IK date and time that the message digest 420 was received by the DTS. It provides no proof of the 
j£f 5 date and time that the document was accessed, created, modified, saved, or transmitted. Moreover, 
=0 because the DTS is located remotely relative to the user, there is no reliable way to provide a digital 
g time-stamp locally at the user's site. 

y 1 One cryptographically-strong DTS, first implemented by Bell Communications Research, 

Q Inc. (also known as "Bellcore"), only uses software and avoids many of the requirements just 
,40 described such as tamperproof hardware. It essentially combines hash values of documents into 
W data structures known as binary trees. The "root" values of such binary trees are then periodically 
i| published in the newspaper. In these Bellcore systems, the time-stamp consists of a set of hash 
values, which allow a verifier to recompute the root of the tree. Since the hash functions are one- 
way, the set of validating hash values cannot be forged. The time associated with the document by 
25 the time-stamp is the date of publication. 

The following Bellcore patents are illustrative of the above-described approach: U.S. Patent 
No. 5,136,646, for "Digital Document Time-Stamping With Catenate Certificate" (Haber et al.); 
U.S. Patent No. 5,136,647, for a "Method for Secure Time-Stamping of Digital Documents" (Haber 
et al.); U.S. Patent No. 5,373,561, for a "Method for Secure Time-Stamping of Digital Documents" 
30 (Haber et al.); and U.S. Patent No. Re. 34,954, which is the reissue of the '647 patent noted above 
and is, likewise, directed to a "Method for Secure Time-Stamping of Digital Documents" (Haber et 
al.). Other patents which are illustrative of similar such approaches are U.S. Patent No. 5,748,738, 
for a "System and Method for Electronic Transmission, Storage and Retrieval of Authenticated 
Documents" (Bisbee et al.), which is assigned to Document Authentications Systems, Inc.; and U.S. 
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Patent No. 5,781,629, for a "Digital Document Authentication System" (Haber et al.), which is 
assigned to Surety Technologies, Inc. The contents of each of the above patents are incorporated 
herein by reference. 

While each of the above approaches uses software and avoids many of the requirements for 
5 tamperproof hardware, they still require a trusted source at a remote location. None of the patents 
listed above teach or suggest any system or method that is capable of providing a trustworthy time- 
stamp at the precise location where the user's digital data files are accessed, created, modified, 
received, saved, or transmitted. Moreover, all of the methods described in the patents listed above 
still leave open the possibility that two individuals may collude to falsely state the value of a hash. 
10 Undetected alterations may still be made with appropriate cryptographic techniques. For 

example, one may alter a document as desired and then make other suppressed changes, such as a 
carriage return followed by a space-up command. Both original document and altered document 
may, therefore, have the same hash value. See, for example, B. Schneier, Applied Cryptography , 
•i Chapter 3.8, "Timestamping Services", pages 61-65 (John Wiley & Sons, Inc. 1994), the contents 
W5 of which are incorporated herein by reference. 

b|3 One approach seeking to avoid such possibilities is described in U.S. Patent No. 5,781,630 

'if (Huber et al), which discloses a system including a cryptomodule that is coupled to a computer. A 
IH cryptomodule in accordance with the Huber at al. patent includes a processor; an interface coupling 
q the processor to the computer; and memory containing algorithms and constants for three purposes: 
Jo (1 ) encoding a document, (2) generating a digital signature to be appended to the document, and (3) 
uj producing a time-stamp to be inserted into the document. The cryptomodule also includes a pair of 
S clocks, one of which is a radio clock and the other of which is a "non-adjustable" quartz clock. 

This system according to the '630 patent depends on a comparison of the two clocks before 

inserting a time-stamp into the document. That is, the time that the document was created, edited, 
25 received, saved, or transmitted is retrieved from both clocks and compared. Any discrepancy 

between the times retrieved is then determined. If, and only if, those discrepancies are sufficiently 

small, will a time-stamp based on the radio clock be inserted into the document and the document 

then encoded. 

Another approach, which seeks to avoid problems of collusion and/or fraud, is described in 
30 U.S. Patent No. 5,619,571 (Sandstrom et al.). Briefly summarized, Sandstrom et al. discloses an 
improved method of storing or retrieving electronic records, particularly those in the form of image 
streams (e.g., TIFF). An image identification code, time data provided by a trusted source, and a 
password are combined to generate a key. The image identification code and time data are stored 
in a public directory associated with the image data stream. Attributes of the image stream (e.g., its 
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size and a hash of at least a segment of the image data) are also determined. The attributes are then 
used to generated a verification code. Subsequently, the verification code is first positioned within 
a private area associated with the data image stream, and then the private area is encrypted with the 
previously generated key. 
5 This approach, however, suffers from two obvious disadvantages. Not only is it limited to 

image file formats having public and private areas, but it is also still dependent on a remote source 
for the time-stamp and the image identification code. It would be much more desirable to provide 
systems and methods of time-stamping digital data files locally and without the continuing reliance 
on a remote trusted source. 
10 Still another approach to provide authenticated documents, with an authenticated time code, 

is described in U.S. Patent No. 5,189,700 (Blandford). Blandford's device includes an RTC and an 
encryption means, which are together sealed in a tamperproof package. Powered by a battery that 
is located outside the tamperproof package, the RTC is used either: (1) to supplant the system clock 
5 of a computer, such that the computer cannot be booted up with an incorrect time; or (2) to provide 
:ij> an encrypted authentication code of time. Such time code is derived from a time retrieved from the 
^0 RTC, which is combined with a device identification number. A secret key contained within the 
~'*z encryption means then encrypts the combination. 

y * While devices according to Blandford, in fact, meet the objective of provided a local source 

O of trusted time, they nevertheless suffer from two major disadvantages. Both disadvantages arise 
Jf) out of the design requirements of such devices. First, Blandford requires the RTC to override the 
W computer's system clock on boot up. It would be much more desirable to avoid changing system 
Q settings in the computer, particularly the setting of its system clock. Second, Blandford requires 

that the RTC be powered by a source (i.e., the battery) outside of the tamperproof package. This, it 
is suggested, is critical to assuring several objectives: (1) ensuring that the RTC cannot be reset, or 
25 it can be reset only under strict procedures; (2) allowing the battery to be replaced in the power-up 
state without affecting the RTC; and (3) disabling the device, and potentially even the computer, in 
the event that power from the source failed. Obviously, it would be much more desirable to avoid 
such inconveniences. 

Summary of the Invention 

30 It is, therefore, a general object of the present invention to provide novel systems, apparatus, 

and methods of preventing fraud in digital data files. More specifically, it is a particular object of 
this invention to provide systems, apparatus, methods, and articles of manufacture for proving the 
integrity of digital-imaging files. Another more particular object of the present invention is to 
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provide such systems, apparatus, methods, and articles of manufacture for time-stamping digital- 
imaging files, which do not continually rely on a remote trusted source of time. 

In accordance with one important aspect of the present invention, the systems and methods 
are directed to computing means. Non-limiting examples of such "computing means" include any: 
5 general purpose computer; mainframe; PC; web browser; e-mail client; e-mail server; network file 
or messaging server; Internet appliance; wireless telephone; pager; personal digital assistant (PDA); 
fax machine; digital still or video camera; digital voice or video recorder; digital copier or scanner; 
interactive television; hybrid combination of any of the above computing means and an interactive 
television; or any other apparatus comprising a processor, memory, the capability to receive input, 
10 and the capability to generate output. Apparatus according to the present invention also includes 
such computing means programmed with software to operate the computing means in accordance 
with the invention. 

According to another important aspect of the present invention, the article of manufacture 
y disclosed herein comprises a computer-readable medium embodying code segments to control a 
i||5 computer to perform the invention. Non-limiting examples of such "computer-readable medium" 

in this regard include any: magnetic hard disk; floppy disk; optical disk, (e.g., a CD-ROM, a CD-R, 

a CD-RW, or any disk compliant with known DVD standards); magneto-optical disk; magnetic 
; jf tape; memory chip; carrier wave used to carry computer-readable electronic data, such as are used 

in transmitting and receiving e-mail or in accessing a network, including the Internet, intranets, 
: 2P extranets, virtual private networks (VPN), local area networks (LAN), and wide area networks 
jTj (WAN); or any other storage device used for storing data accessible by a computer. Non-limiting 
y examples of "code segments" include not only source code segments and object code segments, but 

also computer programs in any language, instructions, objects, software, or any means for 

controlling a computer. 

25 The above and other objects and aspects according to the present invention are provided by 

a system and methods for proving dates of digital-imaging files, which generally comprises a 
trusted time source, means for saving the file at a moment in time, API means for selectively 
retrieving from the trusted time source a date and a time corresponding to the moment in time, and 
means for appending the date and the time retrieved from the trusted time source to the saved file. 

30 Such system and methods may further comprise means for signing the saved file with the date and 
the time retrieved from the trusted time source appended thereto, means for hashing the signed file 
to produce a digest, means for signing the digest with a key to produce a certificate, means for 
appending the certificate to the saved file, and means for saving the file with the certificate 
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appended thereto. All of the foregoing means are preferably sealed together within a tamperproof 
environment. 

Brief Description of the Drawings 
Fig. 1 is a block diagram, which illustrates one conventional process for creating a digital 
5 signature; 

Fig. 2 is a block diagram, which illustrates another conventional process for verifying the 
digital signature created by the process shown in Fig. 1; 

Fig. 3 is a block diagram, which illustrates yet another conventional process of using dual 
signatures to maintain privacy in secure electronic transactions; 
10 Fig. 4 is a block diagram, which illustrates a conventional digital time-stamping service; 

Fig. 5 is a block diagram, which generally illustrates the system according to the present 
invention; 

Fig. 6 is a block diagram, which more specifically illustrates the system shown in Fig. 5; 
■% Fig. 7 is a block diagram of a presently preferred embodiment of the PC system according 

f Jl 5 to the present invention; 

3 Fig. 8 illustrates a digital-imaging file, the date and time of which is to be proven by the 

iJ 2 system and methods according to the present invention; 

yl Fig. 9 highlights a selected portion of the digital-imaging file shown in Fig. 8; 

j=i Fig. 10 depicts an enlarged view of the selected portion of the digital-imaging file shown in 

JO Fig. 9; 

IjJ Fig. 1 1 illustrates a block diagram of a digital communications in medicine (DICOM)- 

!2 compliant system according to another embodiment of the present invention; 

Fig. 12 illustrates communications protocol layers used in the system shown in Fig. 11; 
Fig. 13 shows a block diagram of various requests in the system of Figs. 1 1 and 12; 
25 Fig. 14 illustrates a digital-imaging file as the result of a first phase in a helical tri-phase 

liver scan using computerized tomography (CT); 

Figs. 1 5 shows digital-imaging file as the result of a second phase in a helical tri-phase liver 
scan using computerized tomography (CT); and 

Fig. 16 digital-imaging file as the result of a third phase in a helical tri-phase liver scan 
30 using computerized tomography (CT). 

Detailed Description of the Invention 
A system 500 according to the present invention is shown generally in Fig. 5. System 500 
suitably comprises a computing means 520, an input means 540, and a fraud prevention means 560, 
each of which is operatively coupled together. Computing means 520 more specifically comprises 
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a general-purpose computer, such as a personal computer (PC). Input means 540 more specifically 
comprises any conventional means of inputting digital data to a PC such as a keyboard, a mouse, a 
touchpad, etc. 

Suitable such keyboards include those of the type manufactured by Key Tronic Corporation, 
5 Spokane, WA, U.S.A., and sold under the trademark Lifetime™. These include the Lifetime 

Classic™, a standard 104-key keyboard adapted for use with PS/2 or AT-style keyboard ports; the 
Lifetime Classic Wireless™, a battery-operated standard keyboard adapted for use with PS/2 or 
AT-style keyboard ports through infrared means; the Lifetime Trackball™ and Lifetime Trackball 
Wireless™, both of which are standard keyboards with an integrated trackball mechanism; and, the 

1 0 Lifetime Touchpad™ and Lifetime Touchpad Wireless™, both of which are standard keyboards 
having an integrated touchpad. 

Other suitable input means 540 include those of the type manufactured by Interlink 
Electronics, Camarillo, CA, U.S.A., which employ VersaPad® and VersaPoint® technologies. 

O These include the Model VP9000 ePad™, a semiconductive touchpad and pen input pad that 

&§ combines the functionalities of a PC touchpad pointing device and a WinTab-compatible graphics 
digitizer tablet; the DeskStick™ stationary desktop mouse; the RemotePointPLUS™ cordless, 

m programmable mouse; and the FreedomWriterPRO™, a wireless, "all in one" PC input device that 

m replaces pen, mouse, and keyboard for Internet conferencing, group meetings and presentations. 

L Computing means 520 and input means 540 together, thus, provide a system for creating a 

%Q digital-imaging file (not shown in Fig. 5). The digital-imaging file is initially created by the 

computing means 520, either: (1) by entry of data through the input means 540; or, (2) storage of 

y data in the computing means 520. Such storage of data in the computing means 520 may be 

accomplished through any number of conventional avenues (e.g., e-mail, downloading the digital- 
imaging file from an Internet website, ftp transfers, and transfers by way of removable media, such 

25 as magnetic media including floppy disks, "Super Disks", Clik! ™, Zip™ and Jaz™ disks (all of 
which are trademarks of Iomega Corporation, Roy, UT, U.S.A.); optical media, such as CD-ROM, 
CD-R, CD-RW and DVD; magneto-optical media, etc.). 

In the event that a user (not shown) of the computing means 520 locally creates the digital- 
imaging file, such digital-imaging file would subsequently be saved at a moment in time. Fraud 

30 prevention means 560 is used, according to a particularly important aspect of the present invention, 
to secure the digital-imaging file by maintaining its integrity in the following manner. An 
unalterable time-stamp is affixed to the digital-imaging file by fraud prevention means 560 by way 
of computing means 520. Such a time-stamp may thereafter be used to confirm the date and time 
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associated with any access, creation, modification, receipt, saving, or transmission of the digital- 
imaging file. 

Several embodiments of the present invention will now be described herein after in greater 
detail with reference to Figs. 8-16. However, as shown in Fig. 6, fraud prevention means 560 
generally comprises a trusted local time source 610; means 620 for retrieving from that local time 
source 610 a date and a time corresponding to the moment in time that the digital-imaging file was 
accessed, created, modified, received, or transmitted; means 630 for appending the date and the 
time retrieved from the trusted time source 610 to the saved digital-imaging file; means 640 for 
signing the saved digital-imaging file with the date and the time retrieved from the trusted time 
source 610 appended thereto; means 650 for hashing the signed digital-imaging file to produce a 
digest; means 660 for signing the digest with a key 670 to produce a certificate; means 680 for 
appending the certificate to the saved digital-imaging file; and means 690 for saving the digital- 
imaging file with the certificate appended thereto. 

Referring now to Fig. 7, a block diagram of one presently preferred embodiment of a system 
700 according to the present invention is shown. System 700 generally comprises a PC 720, having 
a keyboard 740 attached thereto for inputting digital data into the PC 720, fraud prevention means 
760 for proving with certainty the dates and times that digital-imaging files contained within the PC 
720 were accessed, created, modified, received, saved, or transmitted, and a monitor 780 for 
displaying such files. As an option, PC 720 may include verification means 780 which is adapted 
to verify the authenticity of a date and time-stamp affixed to such digital-imaging files. 

In the alternative, fraud prevention means 560 may generally comprise a trusted local time 
source 610; application programming interface (API) means (not shown) for selectively retrieving 
from local time source 610 a date and a time corresponding to the moment in time that the digital- 
imaging file was accessed, created, modified, received, saved, or transmitted; means 630 for 
appending the date and the time retrieved from the trusted time source 610 to the digital-imaging 
file; and means 690 for saving the digital-imaging file with the date and the time retrieved from the 
trusted time source 610 appended thereto. In this manner, the fraud prevention means 560 
according to this presently preferred embodiment of the invention avoids the necessity of signing, 
hashing, producing a digest, producing a certificate, and appending that certificate to the digital- 
imaging file as shown in the embodiment of Fig. 6. However, in the event that the user of such 
fraud prevention means 560 desires to include such enhanced level of security, the fraud prevention 
means may further comprise means 640 for signing the saved digital-imaging file with the date and 
the time retrieved from the trusted time source 610 appended thereto; means 650 for hashing the 
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signed digital- imaging file to produce a digest; means 660 for signing the digest with a key 670 to 
produce a certificate; and means 680 for appending the certificate to the digital-imaging file. 

Where the fraud prevention means 560 includes a tamperproof real time clock (RTC) on the 
motherboard or baseboard as described in the aforementioned U.S. Serial No. 09/429,360, the API 
5 means 800 is adapted to retrieve from such RTC a date and a time corresponding to the moment in 
time that the digital-imaging file was accessed, created, modified, received, saved, or transmitted. 
With other embodiments, such as where the tamperproof RTC is installed on an expansion card, PC 
card, or smart card as described in the aforementioned U.S. Serial No. 09/421,279, however, API 
means 800 is otherwise adapted. In these instances, API means 800 is adapted to sense calls for a 
10 timestamp from operating system and/or applications running on the computing means. Thereafter, 
it uses the date and time from the trusted local time source 610 instead of any date and time of the 
computing means system clock. Further details regarding the use of the aforedescribed API means 

is set forth in U.S. Serial No. , entitled "System and Methods for Proving Dates in 

Q Digital Data Files" (Attorney Docket No. 32801 -888888). 

yB5 Use of the system 500 for proving dates in digital-imaging files may now be explained by 

1% reference to Figs. 8-10. A two-dimensional digital-imaging file 800 is shown in Fig. 8. Along the 
?5 X-axis, digital-imaging file 800 extends from Xo to X n , while along the Y-axis, it extends from Y 0 
Iji to Y n . A selected portion 900 of the digital-imaging file 800 is shown in Fig. 9, and in much 

greater detail in Fig. 10. Along the X-axis, the selected portion 900 of the digital-imaging file 800 
~lk) extends from X a , Y b to X b , Y b , while along the Y-axis, it extends from X a , Y a to X b , Y a . 
{Tf According to one embodiment of the present invention, the time and date of any accessing, 

12? creation, modification, receipt, save, or transmission of the entire digital-imaging file 800, or any 

selected portion 900 portion thereof may be proven in the following manner. Retrieving means 620 
selectively retrieves from the local trusted time source 610 a date and a time corresponding to the 
25 moment in time that the digital-imaging file was accessed, created, modified, received, saved, or 
transmitted. That trusted time and date is then appended to the digital-imaging file 800 or selected 
portion 900 thereof by appending means 630. Thereafter, means 640 is used to sign the saved 
digital-imaging file with the date and the time retrieved from the trusted time source 610 appended 
thereto. Means 650 is then used to hash the signed digital-imaging file to produce a digest, and 
30 means 660 is used to sign the digest with a key 670 to produce a certificate. Finally, means 680 is 
used to append the certificate to the saved digital-imaging file, and means 690 is used to save the 
digital-imaging file with the certificate appended thereto. Alternatively, API means as set forth in 

U.S. Serial No. , entitled "System and Methods for Proving Dates in Digital 

Data Files" (Attorney Docket No. 32801-888888), may be used without signing or hashing digital- 
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imaging file 800 or a selected portion 900 thereof. It should be noted that the system and methods 
described herein are not limited to two-dimensional digital-imaging files, but may be extended to 
three-dimensional digital-imaging files without departing from the spirit and scope of the present 
invention. Moreover, by use of the phrase "selected portion of the digital-imaging file", it should 
5 be understood that a plurality of selected portions (e.g., a regular or random array of such selected 
portions) may be time-stamped in any of the foregoing manners. The system and methods of the 
present invention are, likewise, not limited to static digital-imaging files, but extend to dynamically 
rendered digital-imaging files such as those produced by digital video recorders, streaming video, 
and DICOM-Conforming Devices. 
10 DICOM is the industry standard for transferring medical images and information between 

electronic devices, and is based on the Open System Interconnect (OSI) reference model, a 
worldwide communications standard that defines a 7-layer protocol model (Fig. 12). This permits 
users to integrate imaging equipment from different manufacturers to support a range of modalities, 
P as well as computed radiography and digitized film radiographs. DICOM-conforming devices, 
ffc such as the Kodak Digital Science™ diagnostic workstation, are now on the market. 
? 5l DICOM is an acronym for "Digital-imaging and Communications in Medicine", a standard 

III developed by the American College of Radiology (ACR) and National Electrical Manufacturers 
i== Association (NEMA). The ACR provides technical direction and medical oversight, and NEMA 
^ acts as the publishing entity and provides legal oversight. 

2D Any PACS ("Picture Archiving and Communications System") system should conform to 

the DICOM standard, but few systems currently on the market conform totally. A system may 

y conform in one area, such as image archiving, but not conform in others, such as remote primary 
diagnosis, or home teleradiology systems. 

When the American College of Radiology (ACR) and the National Electrical Manufacturers 

25 Association (NEMA) formed a joint committee early in 1983, their goal was to develop a standard 
means of interconnection for medical imaging devices. To accomplish this task, the standard 
would include a dictionary of the data elements needed for proper image display and a hardware 
specification for physically connecting the devices. 
ACR-NEMA, Version 1.0 

30 The ACR-NEMA committee surveyed existing interface standards. None was found to be 

entirely satisfactory. However, a useful idea was borrowed from a standard format for recording 
images on magnetic tape, developed by The American Association of Physicists in Medicine. The 
header portion of that format contained a description of the image along with identifying data 
elements, such as patient name. A concept of using data elements of variable length identified with 
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a tag or key (i.e., the name of the element) was thought to be particularly important and was, thus, 
adopted by the committee. A parallel hardware interface was developed for point-to-point 
connectivity. This interface standard was loosely modeled after an existing instrumentation 
interface. A networking environment was not considered given the large size of the data sets which 
5 would need to be transferred between devices. At the time, neither developers nor end-users of the 
standard had a clear understanding of the requirements for interconnection and interoperation. The 
standard, officially known as ACR-NEMA 300-1985, was known in the industry as ACR-NEMA 
Version 1 .0, and was released to the public at the annual meeting of the Radiological Society of 
North America (RSNA) in 1985. It met with no commercial success, in large part due to the slow 
10 progress that was being made in the development of PACS. Nevertheless, potential implementors 
found ambiguities and incomplete specifications in the standard. 
ACR-NEMA, Version 2.0 

ACR-NEMA 300-1988, commonly known as ACR-NEMA Version 2.0, was published at 
O RSNA in 1988. This version cleared up some of the ambiguities associated with the protocol. In 
l§5 addition, new data elements were added and the standard content received a much more thorough 
; g proofing. This version, also known as the "50-pin connector" standard, was adopted by only a 
^ handful of vendors including General Electric, Siemens, Philips, and Vortech Data, Inc. (now part 
{H of Kodak's Health Imaging Division). The first commercial implementation was shown at RSNA 

1990 by GE and Vortech, the only two companies to commercialize the standard. 
"W It became clear that a point-to-point solution did not meet the developing and future needs 

|7j of the user community. A network standard was needed. Coincident with the marketing of the 
;2f "50-pin" solution, Vortech developed a version of the standard, which implemented ACR-NEMA 
Version 2.0 over TCP/IP. Although this "patch" solution did not address all the subtleties of inter- 
networking, it did allow successful communication of medical images over a network. Siemens 
25 and Philips, at the same time, developed the Standard Product Interconnect (SPI), which was also a 
network implementation of ACR-NEMA Version 2.0. These early network implementations 
formed the basis for the third version of the standard, DICOM. 
ACR-NEMA, Version 3.0 (DICOM) 

The focus of DICOM was not only interconnection, but also network interoperation. The 
30 standard often is called ACR-NEMA Version 3.0, because it replaced ACR-NEMA Version 2.0. 
The name was changed to DICOM to reflect the contribution of international organizations as well 
as the standard's ability to expand beyond the sole support of radiology images. Efforts are being 
made now to expand the standard to cardiology, endoscopy, and other types of medical images. As 
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noted herein above, the Kodak Digital Science™ CX/DX Workstation is an example of a DICOM- 
conforming device. 

As shown in Fig. 1 1, a typical DICOM system 1 100 includes a local workstation 1 1 10, a 
modality host 1 120, a printer 1 130, a CR host (QCW) 1 140, a digitizer 1 150, and an archive 1 160, 
5 each of which is connected by a HIS/RIS 1 1 70 to a remote workstation 1 1 80. Workstation 1180, 
thus, comprises a medical diagnostic and review station, using DICOM services to: (a) import and 
export images; (b) query the content of other devices; and (c) initiate transfers print images. 

Referring now to Fig. 13, DICOM services are implemented using two "application 
entities": (a) the DICOM Server AE 1300, which is used for image transfers and is implemented by 
1 0 a UNTX application called "dcserver" 1 305 ; and (b) the Hardcopy Server AE 1 3 1 0, which is used 
for printing and is implemented by a UNIX application called "hcserver" 1315. 

The dcserver 1305 is expected to be running on the local workstation 1110. A remote 
application entity initiates an association for storage services. Upon notification of acceptance of 
O the association parameters, the remote application entity sends information objects to the dcserver 
■ip5 1305 that stores them in a local database for future use by the CX/DX workstation software. 
;5l The CX/DX workstation user initiates Query and Retrieve requests using the dcserver 1305 

m component, generally by interaction with a User Interface. The dcserver 1305 component initiates 
j)| an association with the Remote Application Entity and uses the Query or Retrieve Service Classes 
:L to issue commands. The Remote Application Entity responds as a Query/Retrieve Service Class 
; ^0 Provider performing C-FIND and C-MOVE operations as required. The dcserver 1305 component 
|7j passes the status responses for these commands to the CX/DX workstation User Interface for 
jjf interpretation and display. 

The hcserver 1315 can be running on the local 1 1 10 or a remote workstation 1 180. The 
CX/DX workstation application using the hcserver requests printing to a print device. The hcserver 
25 1315 initiates an association with a DICOM print SCP for the purpose of printing the job requested 
by the application. The hcserver 1315 can handle simultaneous associations with a number of 
DICOM print SCPs. 

Functional Definitions of Application Entities 

The dcserver 1305 component operates as a daemon. The startup sequence of the CX/DX 
30 workstation system initiates its execution. The dcserver 1305 is left running whether the CX/DX 
workstation software is operational or not. The dcserver uses a configuration file that contains 
information used to validate association attempts from Remote Application entities. The dcserver 
1305 then listens on the configured port for association requests. 
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An association request for Storage Services from a Remote Application Entity causes 
dcserver 1305 to validate the request according to the configuration parameters set at execution 
time. The Remote Application Entity then sends the Information Object Instance. The dcserver 
1305 stores the received Information Object Instance in its local database if the data does not 
5 already exist. The data remains in the database until removed by some action external to this 
Application Entity. 

An association request from a Remote Application Entity for Query or Move Services 
causes dcserver 1305 to validate the request according to the configuration parameters set at 
execution time. The Remote Application Entity then sends the Query or Retrieve request. The 
10 dcserver searches the local database for the instance(s) specified. If the request was C_FIND, then 
a response is returned for each match. If the request was CMOVE, then an association is 
originated to the destination Application Entity specified in the C_MOVE message. Incremental 
responses are sent to the C_MOVE originator to indicate progress of the request. 

0 A request from the CX/DX workstation User Interface causes the dcserver 1305 component 

1 J5 to initiate an association with a Remote Application Entity. The Service Classes offered are 

]% specified in the configuration file. The user can then initiate query and retrieve requests to dcserver 
that are sent to the Remote Application Entity. The CX/DX workstation User Interface displays the 
= li responses from the Remote Application Entity. 

L The hcserver 1315 component operates as a daemon. The startup sequence of the CX/DX 

W workstation system initiates its execution. The hcserver 13 15 is left running whether the CX/DX 
j7f workstation software is operational or not. The hcserver 1315 uses a configuration file to 
y determine the list of printer devices connected to the server and the properties of each printer. 

Association and release requests are logged to the UNIX syslog daemon (syslogd) as local7.info 
messages. Various errors and warning indications are also logged using syslogd. 
25 Further details regarding workstation 1110 may be found in the Kodak Digital Science™ 

CX/DX Workstation DICOM Conformance Statement (Document No: 3H8353 - Version 2.1 .7, 
November 23, 1998), the Kodak Digital Science Medical Viewing Station DICOM Conformance 
Statement (Document No: 6C8324 - Version 2.1, October 13, 1997), the Kodak Digital Science 
Modality Acquisition Unit (MAU) DICOM 3.0 Conformance Statement (Document No: 6C7107 - 
30 Version 7.3, June 4, 1998), the Kod ak Digital Science DICOM Print Spooler, Model 100, a 

component of the Kodak Ektascan CP DICOM Input Package DICOM Conformance Statement 
(Document No: 6C7107 - Version 2.3, April 7, 1998), the Kodak Digital Science Film Digitizer 
DICOM Conformance Statement (Document No: 6C73 1 1 , Rev. A - Version 4.3.2, October 27, 
1 997), the Kodak Digital Science Medical Image and Information Library DICOM Conformance 
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Statement (Document No: 6C8816, Rev. E - Version 3.0, October 4, 1998), the Kodak Digital 
Science Medical Image Manager DICOM Conformance Statement (Document No: 2E0139 - 
Version 2.1, November 4, 1998), the Kodak Digital Science Medical Laser Printer 190 DICOM 
Conformance Statement (P/N 990515 - Version 2.5, January 1, 1998), the Kodak Digital Science 
5 Print Interface Unit (PIU) DICOM 3.0 Conformance Statement (Document No: 6C7108 - Version 
8.3, April 7, 1998), the Kquality Control Workstation for the Computed Radiography System 400 
DICOM Conformance Statement (Document No: 6C6238 - Version 4.00.01, April 3, 1998), the 
contents of each of which is incorporated herein by reference. 

In accordance with yet another important aspect of the present invention, the methods 
10 herein employ a privately defined unique identifier (UIDs), as provided for in DICOM to uniquely 
identify items such as Specialized or Private SOP Classes, Image SOP Instances, Study SOP 
Instances, etc. UIDs are formed using a registered root {see, e.g., Annex C of the DICOM 
Standard) and an organization specific suffix. The manner in which the suffix of a Privately 
O Defined UID is defined is not constrained by the DICOM Standard. Only the guarantee of its 
ife uniqueness by the defining organization is required by DICOM. This example presents a particular 
% choice made by a specific organization in defining its suffix to guarantee uniqueness. A variant is 
W discussed. 

1^ " 1.2. 840. xxxxx. 3. 152. 235. 2. 12. 187636473" root, suffix 

In this example, the root is: 
!%i 1 Identifies ISO 

O 2 Identifies ANSI Member Body 

:jf 840 Country code of a specific Member Body (U.S. for ANSI) 

Q xxxxx Identifies a specific Organization. (provided by ANSI) 

In this example the first two components of the suffix relate to the identification of the device: 
25 3 Manufacturer or user defined device type 

152 Manufacturer or user defined serial number 

The remaining four components of the suffix relate to the identification of the image: 
235 Study number 

2 Series number 

30 12 Image number 

1 87636473 Encoded date and time stamp of image acquisition (as provided by the fraud 
prevention means 420 incorporated within the DICOM-compliant device). 

In this example, the organization has chosen these components to guarantee uniqueness. 
Other organizations may choose an entirely different series of components to uniquely identify its 
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images. In this example, the organization has chosen these components to guarantee uniqueness. 
Other organizations may choose an entirely different series of components to uniquely identify its 
images. For example, it may have been perfectly valid to omit the Study Number, Series Number 
and Image Number if the time stamp had a sufficient precision to ensure that no two images might 
5 have the same date and time stamp. The present invention permits this. 

Referring now to Figs. 14-16, the advantages of using the system and methods according to 
the present invention for digital -imaging files will now be explained. Fig. 14 shows a digital- 
imaging file 1400 of a patient who has chronic hepatitis and suspected hemochromatosis. CT study 
was performed to evaluate for possible hepatoma. The examination was performed using a triple 
10 pass technique as follows: (a) first pass (image thickness/table speed) 2.5/15 mm; (b) second pass 
(image thickness/table speed) 5/15 Q; and (c) third pass (image thickness/table speed) 5/22.5. 

The first pass as shown in Fig. 14 is obtained at aortic peak plus 10 seconds, the second pass 
(Fig. 15) between 10 and 20 seconds after aortic peak, and the third pass (Fig. 16) 60 seconds after 
O the beginning of the intravenous bolus injection. Aortic peak is determined from a preliminary 
ip5 mini bolus. Bolus contrast injection for the study is 5 cc/sec for 30 seconds of 60% iodinated 
J=f contrast material. The first two passes are obtained during a single breath-hold and the third pass in 
ill a separate breath-hold. It can be seen, therefore, that the relative timing of each pass is important to 

note, not only for diagnostic purposes, but also for the purpose of supporting later made claims for 
= insurance and the like. In the event that a malpractice claim is later made for improper or negligent 
W misdiagnosis, the digital-imaging files shown in Figs. 14-16 could be crucial, especially since each 
"Q of them would be appropriately time-stamped in accordance with the present invention. The time- 
D stamps 1410, 1510, and 1610 shown respectively on digital-imaging files 1400, 1500, and may be 
compared to other appropriate data in determining whether malpractice could be proven. 

Variations and modifications of the above described methods and systems according to this 
25 invention are possible without departing from the true spirit and scope thereof. For example, fraud 
prevention means 560 may be initially installed on motherboards or baseboards in the manner 
described above. Alternatively, they may be retrofitted in existing PCs; or they may be installed on 
expansion cards of the PCI and ISA types supported by such motherboards and baseboards; or they 
may be installed in an external device such as a dongle coupled to such PCs. 
30 Such expansion cards and external devices, therefore, would each include an RTC set to the 

trusted time and having a tamper-evident label attached thereto. In that case, such RTCs on the 
expansion cards and external devices would be include the API means 800 to selectively bypass 
any system RTC on the motherboard or baseboard. They would, thus, not interfere with such 
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system RTCs, and would only be used to affix a trusted time-stamp to any or all digital-imaging 
files in the foregoing manner. 

Conventional intrusion alarms of PCs and servers could also be coupled to provide a signal 
to the fraud prevention means 560. In that case, any activation of the signal, which would indicate 
5 an occurrence of an intrusion, would be used to disable operation of the fraud prevention means 
560. Fraud prevention means 560 would not only be capable of recognizing other certificates from 
CAs known in the PKI environment, but they would also be capable of being used in conjunction 
with any of the above described Internet protocols. 

The verification means 580 according to the present invention could, likewise, be coupled 
10 within fraud prevention means 560 and provide a simple means for determining that a received 

message that was time-stamped by a remote system 700 was, indeed, time-certified. Alternatively, 
verification means 580 may comprise any biometric device (e.g., iris scan, retina scan, finger scan, 
hand geometry, voice verification, and dynamic signature verification devices, etc.) may be used in 
y order to further verify the identity of a user of a local PC system 700. Suitable such devices include 
iiiS face recognition devices manufactured and sold by Visionics Corporation, Exchange Place, New 
^ Jersey U.S.A., fingerprint readers of the SecureTouch®97 type manufactured by Biometric Access 
W Corporation, Round Rock, Texas U.S.A., and multiple access devices manufactured by Keyware 
(n Technologies. 

L Finally, the system 700 according to the present invention may simply comprise a stand- 

2£> alone PC, a server, a PC or workstation coupled to a server, a LAN, WAN, MAN, each of which 
y comprises a plurality of PCs, workstations, and servers. All that is necessary is that the PC or 
;!f workstation and/or server include fraud prevention means 560 as previously described. 

It should, therefore, be understood that within the scope of the claims appended hereto, the 
present invention may be practiced otherwise than has been specifically described in the foregoing 
25 embodiments. 
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Claims 

What I claim as my invention is: 

1 . A system for maintaining a digital-imaging file, comprising: 
computer means having installed therein a trusted time source; 
means for saving the file at a moment in time; 

API means for selectively retrieving from said trusted time source a date and a time 
corresponding to said moment in time; 

means for appending said date and said time retrieved from said trusted time source 
to said saved file; and 

means for saving said file with said certificate appended thereto. 

2. The system according to claim 1, further comprising: 

means for signing said saved file with said date and said time retrieved from said 
trusted time source appended thereto; 

means for hashing said signed file to produce a digest; 

means for signing said digest with a key to produce a certificate; and 

means for appending said certificate to said saved file. 

3. The system according to claim 1, further comprising means for verifying the 
authenticity of said file with said certificate appended thereto. 

4. The system according to claim 3, wherein said verification means comprises means 
for signing said saved file with said date and said time retrieved from said trusted time source 
appended thereto with an ID. 

5. The system according to claim 4, wherein said ID is selected from the group 
consisting of an ID corresponding to a user, an ID corresponding to a system used by said user, and 
an ID corresponding to an enterprise within which said user uses the system. 

6. The system according to claim 5, wherein said ID corresponding to a system used by 
said user is elected from the group consisting of a platform ID, a server node ID, and a network ID. 
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7. The system according to claim 5, wherein said user ID is selected from the group 
consisting of a plurality of characters identifying said user, first data representing an iris scan of 
said user, second data representing a retina scan of said user, third data representing a finger scan of 
said user, fourth data representing said user's hand geometry, fifth data representing said user's 
voice, sixth data representing said user's signature, and combinations of said plurality of characters, 
first, second, third, fourth, fifth, and sixth data. 

8. The system according to claim 1, wherein said trusted time source comprises: 
a real time clock; and 

a battery coupled to and powering said real time clock. 

9. A method of maintaining a digital-imaging file in computing means, comprising: 
providing a trusted time source in the computing means; 

saving the file at a moment in time; 

selectively retrieving from said trusted time source a date and a time corresponding 
to said moment in time; 

appending said date and said time retrieved from said trusted time source to said 

saved file; and 

saving said file with said certificate appended thereto. 

10. The method according to claim 9, wherein said computing means further comprises 
a system clock, operating system means for operating the computing means, and an application 
running on the operating system means, and said step of selectively retrieving from said trusted 
time source further comprises the step of providing an API between the trusted time source and the 
application, wherein said API is adapted to select a date and a time from the system clock in a first 
plurality of instances, and to select said trusted time source a date and a time corresponding to said 
moment in time in a second plurality of instances. 
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11. The method according to claim 10, further comprising the steps of: 

signing said saved file with said date and said time retrieved from said trusted time 
source appended thereto; 

hashing said signed file to produce a digest; 

signing said digest with a key to produce a certificate; and 

appending said certificate to said saved file. 

12. The method according to claim 10, wherein said first plurality of instances comprise 
a first plurality of operating system calls which are unrelated to the application. 

13. The method according to claim 10, wherein said second plurality of instances 
comprise: 

a second plurality of operating system calls, each of which relates to the application; 

and 

a plurality of application calls which are unrelated to the operating system means. 

14. The method according to claim 10, further comprising the step of providing tamper- 
evident means for labeling said trusted time source. 

15. The method according to claim 10, wherein said moment in time corresponds to an 
access of the digital-imaging file. 

16. The method according to claim 10, wherein said moment in time corresponds to a 
creation of the digital-imaging file. 

17. The method according to claim 1 0, wherein said moment in time corresponds to a 
modification of the digital-imaging file. 

18. The method according to claim 10, wherein said moment in time corresponds to a 
receipt of the digital-imaging file. 

19. The method according to claim 10, wherein said moment in time corresponds to a 
saving of the digital-imaging file. 
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20. The method according to claim 1 0, wherein said moment in time corresponds to a 
transmission of the digital-imaging file. 

21. The method according to claim 10, wherein said step of providing an API between 
the trusted time source and the application further comprises the step of preventing changes to the 
system clock. 
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Abstract of the Disclosure 
A system and methods for proving dates of digital-imaging files, which are accessed, 
created, modified, received, saved, or transmitted by a computer includes a trusted time source in a 
tamperproof environment, a first subsystem for saving the file at a moment in time, a second 
subsystem for retrieving from the trusted time source a date and a time corresponding to the 
moment in time, a third subsystem for appending the date and the time retrieved from the trusted 
time source to the saved file, a fourth subsystem for signing the saved file with the date and the 
time retrieved from the trusted time source appended thereto, a fifth subsystem for hashing the 
signed file to produce a digest, a sixth subsystem for signing the digest with a key to produce a 
certificate, a seventh subsystem for appending the certificate to the saved file, and an eighth 
subsystem for saving the file with the certificate appended thereto. The trusted time source is a real 
time clock, which is not resettable, is independent of any system clock of the computer, and is 
installed locally relative to the computer. 
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